CNNVD-202601-1829 Information

CNNVD ID

CNNVD-202601-1829

CVE-2025-68471

  • CNNVD Published: 2026-01-12

Description (Chinese)

Avahi是Avahi开源的一套用于Linux的本地服务发现工具。 Avahi 0.9-rc2及之前版本存在安全漏洞,该漏洞源于相隔2秒发送2个包含CNAME资源记录的未经请求公告,可能导致avahi-daemon崩溃。

Description (English)

Avahi is an open source set of local service discovery tools for Linux. There is a security gap in Avahi 0.9-rc2 and earlier versions, which stems from the sending of two unrequested notices containing CNAME resource records two seconds apart, which could lead to the collapse of awahi-daemon.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Avahi

Published

2026-01-12

Last Modified

2026-02-24

References

https://github.com/avahi/avahi/commit/9c6eb53bf2e290aed84b1f207e3ce35c54cc0aa1 https://github.com/avahi/avahi/issues/678 https://github.com/avahi/avahi/security/advisories/GHSA-56rf-42xr-qmmg

Share on: